Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/1dyPVnR62H43RQryBzMqv60_-yk.roa
File: 1dyPVnR62H43RQryBzMqv60_-yk.roa (raw, json)
Hash identifier: WKJMG0fUEiNMvtlet6gTx61Jrp2fkVWAykJcv/uYpZc=
Subject key identifier: D5:DC:8F:56:74:7A:D8:7E:37:45:0A:F2:07:33:2A:BF:AD:3F:FB:29
Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Certificate serial: 0191FAF24D38E9649DAEA317E6F6A610F4DA
Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/1dyPVnR62H43RQryBzMqv60_-yk.roa
Signing time: Mon 16 Sep 2024 13:07:48 +0000
ROA not before: Mon 16 Sep 2024 13:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57752
IP address blocks: 45.10.45.0/24 maxlen: 24
45.10.46.0/23 maxlen: 23
45.88.68.0/22 maxlen: 24
45.89.152.0/22 maxlen: 22
45.91.144.0/22 maxlen: 22
45.130.236.0/22 maxlen: 22
45.130.236.0/24 maxlen: 24
45.130.237.0/24 maxlen: 24
45.130.238.0/24 maxlen: 24
45.130.239.0/24 maxlen: 24
83.136.148.0/23 maxlen: 23
83.136.150.0/23 maxlen: 23
109.205.64.0/21 maxlen: 21
176.118.172.0/22 maxlen: 22
185.17.56.0/22 maxlen: 22
185.17.56.0/24 maxlen: 24
185.17.57.0/24 maxlen: 24
185.54.36.0/22 maxlen: 22
185.167.220.0/22 maxlen: 22
185.234.48.0/22 maxlen: 22
195.12.37.0/24 maxlen: 24
2a03:dc00::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 17 Sep 2024 07:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:f2:4d:38:e9:64:9d:ae:a3:17:e6:f6:a6:10:f4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Validity
Not Before: Sep 16 13:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5dc8f56747ad87e37450af207332abfad3ffb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b1:67:a0:3b:1e:d7:a1:bf:83:a6:4e:0a:71:
97:23:ee:dc:d0:d8:55:60:2f:e4:92:58:c2:02:89:
8d:86:75:fe:77:81:9f:3e:85:ad:9e:b9:5f:f3:ea:
6a:b5:4f:0a:aa:90:5a:46:fd:33:2f:ef:39:6a:06:
21:63:3e:c0:fb:42:85:3a:f0:43:b3:be:27:83:3c:
cb:a0:7c:0c:47:f5:ca:e0:5c:35:2e:69:b1:43:00:
f1:da:14:f4:f5:82:b7:2f:d5:c9:df:0d:db:ad:27:
28:d5:68:ed:a3:d4:31:43:7c:d4:cf:9e:59:40:40:
c8:de:a4:33:ec:58:87:31:18:26:b4:68:34:4a:9d:
d8:63:5b:d7:25:53:75:c0:22:22:a1:9d:0b:c7:8f:
af:9c:19:0f:4c:24:e3:05:a4:43:5f:35:f1:9d:bf:
e5:6e:35:aa:61:b6:e2:54:21:5d:7c:6f:59:57:ac:
5e:2f:46:58:e5:f8:71:0e:20:38:11:3c:6a:c3:2a:
1d:93:20:1e:1e:bd:ad:27:a7:fc:45:88:8a:8a:48:
11:28:1e:40:35:34:0e:12:53:c0:e0:9b:bb:73:d8:
71:fb:f0:a0:48:73:df:15:9d:d3:3c:39:3a:ab:84:
c1:1d:2f:e7:d7:c5:5b:99:cb:2a:5f:e1:6d:6d:45:
8d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DC:8F:56:74:7A:D8:7E:37:45:0A:F2:07:33:2A:BF:AD:3F:FB:29
X509v3 Authority Key Identifier:
keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/1dyPVnR62H43RQryBzMqv60_-yk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.45.0-45.10.47.255
45.88.68.0/22
45.89.152.0/22
45.91.144.0/22
45.130.236.0/22
83.136.148.0/22
109.205.64.0/21
176.118.172.0/22
185.17.56.0/22
185.54.36.0/22
185.167.220.0/22
185.234.48.0/22
195.12.37.0/24
IPv6:
2a03:dc00::/32
Signature Algorithm: sha256WithRSAEncryption
7f:47:ee:21:5a:e1:00:b8:0f:93:3d:0f:17:df:b2:71:93:3e:
43:20:0b:1b:aa:c9:75:cc:1c:0f:81:ae:50:46:6e:c8:6a:31:
40:2c:68:8d:36:ce:f3:11:67:55:1d:40:55:2a:f6:01:2b:21:
da:02:98:dd:52:1a:96:04:8c:f8:9a:c1:12:52:32:99:82:bd:
1b:0a:16:dd:c1:c6:63:57:2b:80:17:86:30:be:aa:9c:ef:21:
7f:ba:71:67:c8:eb:e3:fc:1d:39:ac:01:bf:53:05:f9:f2:7d:
28:7e:10:9b:f5:9a:14:7a:76:47:0f:0f:39:f7:16:1b:e4:4d:
62:24:3a:47:77:64:2c:ee:af:d4:e8:2a:86:36:cd:46:23:0f:
05:00:69:bf:8a:1c:1e:dd:3a:14:40:db:35:73:0c:79:fd:14:
20:39:0d:dc:ea:2a:ec:e9:8e:ef:e0:42:3c:21:82:d2:b7:86:
38:59:9e:f9:2d:03:f8:26:3c:77:60:f6:c8:48:39:5f:f3:d1:
ce:42:f4:a2:ac:24:50:2e:9a:fc:e1:b4:0e:d1:e0:96:df:8d:
c8:29:59:45:51:39:c1:39:03:c9:6c:d1:a3:b8:46:3b:32:2d:
c3:a2:b3:19:6f:5e:23:03:88:02:df:48:68:1f:91:5f:bc:24:
43:be:79:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:19:33 2025 by rpki-client